Measuring government policy on open source with a new dataset
Policymakers around the world are developing policies that impact how software gets built and who gets to build it, see the latest now. ⌘ Read more
Ignite Realtime Blog: New: Openfire MUC Real-Time Block List plugin!
A new plugin has been made available for Openfire, our cross-platform real-time collaboration server based on the XMPP protocol. We have named this new plugin the MUC Real-Time Block List plugin.
This plugin can help you moderate your chat rooms, especially when your service is part of a larger network of federated XMPP domains. From experience, the XMPP community has learned that bad actors tend to spam a wid … ⌘ Read more
50% (24 out of 48) of the workouts of my first Freeletics “training journey” completed! 🤓💪 ⌘ Read more
mox Mail Server
I currently use Purelymail for email. It’s very cheap and does everything I need (“purely email”). I’m also happy that I’m free of all the headaches of having a good IP reputation and setting everything up so that my mail doesn’t end up in junk folders. ⌘ Read more
The code that wasn’t there: Reading memory on an Android device by accident
CVE-2022-25664, a vulnerability in the Qualcomm Adreno GPU, can be used to leak large amounts of information to a malicious Android application. Learn more about how the vulnerability can be used to leak information in both the user space and kernel space level of pages, and how the GitHub Security Lab used the kernel space information leak to construct a KASLR bypass. ⌘ Read more
Erlang Solutions: Can’t Live with It, Can’t Live without It
I’d like to share some thoughts about Elixir’s with keyword. with is a wonderful tool, but in my experience it is a bit overused. To use it best, we must understand how it behaves in all cases. So, let’s briefly cover the basics, starting with pipes in Elixir.
But like all tools, you should think about when it is best used…
Pipes are at their best when you expect your function … ⌘ Read more
Responsible AI pair programming with GitHub Copilot
GitHub Copilot boosts developer productivity, but using it responsibly still requires good developer and DevSecOps practices. ⌘ Read more
Profanity: New Profanity Old System
Occasionally people visit our MUC asking how to run the latest profanity release on years old systems.
For some distributions people maintain a backports project, so you can get it from there if available.
Here we want to describe another methods, using containers, more specifically distrobox.
What’s Distrobox?It’s basically a tool that let’s you run another distribution on your system. It uses docker/podman to create containers that … ⌘ Read more
Update on the future stability of source code archives and hashes
A look at what happened on January 30, what measures we’re putting in place to prevent surprises, and how we’ll handle future changes. ⌘ Read more
Secure Your Kubernetes Clusters with the Kubescape Docker Extension
Find out how to use the Kubescape Docker Extension for Kubernetes cluster security right from Docker Desktop. ⌘ Read more
Prosodical Thoughts: Prosody 0.12.3 released
We are pleased to announce a new minor release from our stable branch.
This is a bugfix release for our stable 0.12 series. Most notably, it fixes a
regression for SQL users introduced in 0.12.2, and a separate long-standing
compatibility issue with archive stores on certain MySQL/MariaDB versions.
It also fixes an issue with websockets discovered by the Jitsi team, some
issues with our internal HTTP client API, and we’ve improved the accuracy of
‘prosodyctl check dns’ in … ⌘ Read more
New professional website
I’m always programming on my blogging software, so today I decided to do something different. With the help of ChatGPT, which wrote the basic HTML and CSS template, I created a new resume website, which is basically a copy of everything I put on my LinkedIn profile. ⌘ Read more
On my blog: Developer Diary, World Day of Social Justice https://john.colagioia.net/blog/2023/02/20/social-justice.html #programming #project #devjournal
Hey @manton Are posts from Activity Pub actors I follow suppose to show up like this with the acct: prefix?
JMP: SMS Account Verification
Some apps and services (but not JMP!) require an SMS verification code in order to create a new account. (Note that this is different from using SMS for authentication; which is a bad idea since SMS can be easily intercepted, are not encrypted in transit, and are v … ⌘ Read more
Hey @manton wondering if you can help debug on your side for me why micro.blog isn’t looking up successfully, get a spinning search wheel and no results, my activitypub user @james@james (custom implemtnation I’m building). Works with a GTS (GotoSocial) instance so far, but not micro.blob :/ ⌘ Read more
On my blog: Free Culture Book Club — Life Blood, chapters 23 – 25 https://john.colagioia.net/blog/2023/02/18/life-blood-8.html #freeculture #bookclub
On my blog: Toots 🐘 from 02/13 to 02/17 https://john.colagioia.net/blog/2023/02/17/week.html #linkdump #mastodon #socialmedia #week
blog: short note about why you should code it yourself
On my blog: Real Life in Star Trek, Time Squared https://john.colagioia.net/blog/2023/02/16/time-squared.html #scifi #startrek #closereading
ICYMI: CodeQL enhancements
Learn about CodeQL’s improved user experience and enhancements that let you scan new languages, detect new types of CWEs, and perform deeper analyses of your applications. ⌘ Read more
お知らせ：JPCERT/CC Eyes「CWE（Common Weakness Enumeration）のView「CWE-1003」日本語訳の公開」 ⌘ Read more
2022 Transparency Report
Looking back over a year’s worth of developer-first content moderation and, new in this report, making our data more accessible to researchers. ⌘ Read more
5 Developer Workstation Security Best Practices
Learn how Hardened Docker Desktop can help you follow the five most critical developer workstation security best practices. ⌘ Read more
JMP: Newsletter: JMP is 6! Leaving beta this year! And FOSSY 🙂️
Hi everyone!
Welcome to the latest edition of your pseudo-monthly JMP update!
In case it’s been a while since you checked out JMP, here’s a refresher: JMP lets you send and receive text and picture messages (and calls) through a real phone number right from your computer, tablet, phone, or anything else that has a Jabber client. Among other things, JMP has these features: Your phone number on every device; Multiple phone numbers, one … ⌘ Read more
Git security vulnerabilities announced
Git users are encouraged to upgrade to the latest version, especially if they use `git apply` or `git clone` against untrusted patches or repositories. ⌘ Read more
GitHub Copilot now has a better AI model and new capabilities
We’re launching new improvements to GitHub Copilot to make it more powerful and more responsive for developers. ⌘ Read more
GitHub Copilot for Business is now available
GitHub Copilot is the world’s first at-scale AI developer tool and we’re now offering it to every developer, team, organization, and enterprise. ⌘ Read more
Microsoft Office and OneDrive for free?
I’m a bit of an indecisive (and frugal) person sometimes. ⌘ Read more
Nice, the number of GoBlog users is growing! 🤓 The next step is a growing number of GoBlog developers. It would be great to have more people giving advice on how to improve the code. 😅 Any senior Go devs out there? ⌘ Read more
Yout amicus: fighting for developers’ right to innovate
Our mission to accelerate human progress through developer collaboration requires us, from time to time, to fight against legal developments that would needlessly impair developers’ right to innovate. That’s why GitHub has filed an amicus brief in the appeal of Yout LLC v. Recording Industry of America, Inc. ⌘ Read more
On my blog: Developer Diary, World Radio Day https://john.colagioia.net/blog/2023/02/13/radio.html #programming #project #devjournal
The impending first era of AI
There’s an article in WSJ about the imminent ‘AI Boom’ and how a couple of companies, the ones that have already been both enabling and controlling our existence, to a large extent, are bound to become even more powerful. It’s interesting to ‘see’ the interplay if you’ve been working in computing technology for the past decade or so. Christopher Mims, the author of the WSJ article, posits that the computing requirements of large language models, latent text-to-image diffus … ⌘ Read more
On my blog: Free Culture Book Club — Life Blood, chapters 20 – 22 https://john.colagioia.net/blog/2023/02/11/life-blood-7.html #freeculture #bookclub
On my blog: Toots 🐘 from 02/06 to 02/10 https://john.colagioia.net/blog/2023/02/10/week.html #linkdump #mastodon #socialmedia #week
How I archive my favorite TV show to get rid of Amazon Prime
I’m a fan of the German TV series “Notruf Hafenkante”, which is shown on the public broadcaster ZDF and is also available on their website. New episodes are released weekly, and older episodes are also made available on a regular basis. After a few months, however, they are no longer available for free. At the moment I have to buy an extra subscription for a Prime Video Channel to be able to watch all the old episodes. But that makes me dependent on Amazon, and I d … ⌘ Read more
R to @mind_booster: Sobre o do PS, escrevi na semana passada sobre ele aqui:
https://tilde.pt/~marado/blog/o-voto-eletronico-e-a-memoria-selectiva.html
Sobre o do PS, escrevi na semana passada sobre ele aqui:
Яндекс ждёт стажёров
Лето ещё нескоро, но мы уже готовы предложить вам способ провести его с толком — приходите к нам на летнюю стажировку. Стажировка даёт полезный опыт и новые знания, а ещё это возможность посмотреть, как устроен Яндекс, и приложить руку к сервисам, которые известны всем. Например, научить новому Алису, сделать точнее Карты, усовершенствовать Маркет — или внести вклад в развитие нейронных сетей, которые генерируют тексты и картинки. Интересных задач у нас много.
Базовые требования к стажёрам — … ⌘ Read more
On my blog: Real Life in Star Trek, The Royale https://john.colagioia.net/blog/2023/02/09/royale.html #scifi #startrek #closereading
Please vote no 👎 for the Telemetry in the Go toolchain proposal 🙏 #golang #telemtry #justsayno ⌘ Read more
Erlang Solutions: Elixir, 7 steps to start your journey
Read this post in Spanish.
Let’s talk about Elixir!
Elixir is a functional programming language created by José Valim to build concurrent and scalable systems. It is defined as:
“a dynamic, functional language for building scalable and maintainable applications”.
Its first version was released in 2012. Since then, n … ⌘ Read more
Erlang Solutions: Elixir, 7 pasos para iniciar tu viaje
¡Hablemos de Elixir!
Elixir es un lenguaje de programación funcional creado por José Valim para construi sistemas concurrentes y escalables.
“a dynamic, functional language for building scalable and maintainable applications”.
Su primera versión fue liberada en 2012. Desde entonces, se le han agregado nuevas funcionalidades y mejoras hasta llegar a su [versión actual](https://elixir-lang.org/blog/2 … ⌘ Read more
Release Radar, Festive Edition · December 2022 – January 2023
Welcome to our special edition of the Release Radar 🎄. Between Christmas festivities, end of the year parties, Chinese New Year, or simply enjoying some time off, almost everyone has been celebrating – us too! Now we’re taking a moment to celebrate these awesome open source projects that shipped major version releases during December and […] ⌘ Read more
Frozen ❄️ ⌘ Read more
Dino: Dino 0.4 Release
Dino is a secure and open-source messaging application.
It uses the XMPP (Jabber) protocol for decentralized communication.
We aim to provide an intuitive and enjoyable user interface.
The 0.4 release adds support for message reactions and replies. We also switched from GTK3 to GTK4 and make use of libadwaita now.
Reactions and RepliesReactions give you a quick and light-weight way to respond to a message with an emoji.
They … ⌘ Read more
In reply to: Oatmeal - week notes
The worst kind of blogging is blogging about blogging, so, I’ll keep this blogging about blogging short!
I’ve made some minor updates to the design of the website that have improved it’s usability a wee bit, and are a step in the right direction toward upping my accessibility game. The major remaining accessibility issues are around color contrast and some structura … ⌘ Read more
お知らせ：JPCERT/CC Eyes「TSUBAMEレポート Overflow（2022年10～12月）」 ⌘ Read more
The technology behind GitHub’s new code search
A look at what went into building the world’s largest public code search index. ⌘ Read more
How to mitigate OWASP vulnerabilities while staying in the flow
Explore how GitHub Advanced Security can help address several of the OWASP Top 10 vulnerabilities ⌘ Read more